Cyberwire - RSAC's 2019 edition of its Innovation Sandbox was held yesterday, with ten of the security sector's most interesting start-ups on display. NSFOCUS, a leader in holistic hybrid security solutions, today unveiled Attack Threat Monitoring, which provides real-time insights and contextual awareness of the global DDoS threat landscape.
Blog
NSFOCUS Unveils New DDoS Mitigation Solution with Contextual Analysis
NSFOCUS to demo Attack Threat Monitoring at RSAC USA 2019 in San Francisco from March 4 -8, 2019 SANTA CLARA, Calif., March 4, 2019 – NSFOCUS, a leader in holistic hybrid security solutions, today unveiled Attack Threat Monitoring, which provides real-time insights and contextual awareness of the global DDoS threat...
Drupal Remote Code Execution Vulnerability (CVE-2019-6340) Threat Alert
Overview Drupal released a security advisory, announcing remediation of a highly critical remote code execution vulnerability (CVE-2019-6430), which stems from some field types improperly sanitizing data from non-form sources, leading to potential execution of arbitrary PHP code. (mais…)
Gafgy Botnet – Practitioner of the BaaS Mode
Overview In an era of everything being connected, with the increase of IoT devices exposed on the Internet and vulnerabilities detected in them, more and more malware focuses on the inexhaustible zombie repository. Therefore, IoT platform-based malware families have undergone an exponential growth. The year 2018 alone saw 21 new...
IP Reputation Report-03012019
Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at March 01, 2019. (mais…)
Attack and Defense Around PowerShell Event Logging
0x00 Overview PowerShell has been a focus of concern for network defense. The fileless PowerShell, featuring LotL and excellent ease of use, is widely used in various attack scenarios. In order to capture PowerShell-based attacks, an increasing number of security professionals tend to, through PowerShell event log analysis, extract attack...
